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(1) Real Party in Interest 

A statement identifying by name the real party in interest is contained in the brief. 

(2) Related Appeals and Interferences 

The examiner is not aware of any related appeals, interferences, or judicial proceedings 
which will directly affect or be directly affected by or have a bearing on the Board's decision in 
the pending appeal. 

(3) Status of Claims 

This appeal involves claims 1-2, 10, and 12-14. 

Claims 3-5, 7-9, 1 1 and 15-20 are objected to as being dependent upon a rejected base 
claim, but would be allowable if rewritten in independent form including all of the limitations of 
the base claim and any intervening claims. 

Claim 6 has been canceled. 

(4) Status of Amendments After Final 

The appellant's statement of the status of amendments after final rejection contained in 
the brief is correct. 

(5) Summary of Claimed Subject Matter 

The summary of claimed subject matter contained in the brief is correct. 

(6) Grounds of Rejection to be Reviewed on Appeal 
WITHDRAWN REJECTIONS 

The following grounds of rejection are not presented for review on appeal because they 
have been withdrawn by the examiner. Claims 3-5, 7-9, 1 1 and 15-20 rejected under 35 
U.S.C. 102(e) have been withdrawn. 
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(7) Claims Appendix 

The copy of the appealed claims contained in the Appendix to the brief is correct. 

(8) Evidence Relied Upon 

US 6,839,680 Liu et al. 01-2005 

(9) Grounds of Rejection 

The following ground(s) of rejection are applicable to the appealed claims: 

Claims 1-2, 10-12 and 13-14 are rejected under 35 U.S.C. 102(e) as being anticipated by 
Liu et al. (U.S. 6,839,680). 

Liu teaches a computer implemented method and system of provisioning an aggregated service 
(724) in a computing network, comprising: 

• obtaining credentials of a user who requests to access an aggregated service; (abstract; 
col.6, lines 39-56) 

• locating, in a network-accessible registry, a service description document specifying a 
provisioning interface for the aggregated service, the aggregated service comprising an 
aggregation of a plurality of sub-services and the provisioning interface specifying how to 
invoke identity functions of the aggregated service; (724, fig. 10 including an aggregation of 
plurality of sub-services) 

•analyzing the obtained credentials by invoking one or more of the identity functions, 
according to the specification thereof in the provisioning interface, to determine whether the user 
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is authenticated for, and/or is authorized for, accessing the aggregated service; (col 16, line 59- ; 
"ProReach ensures the privacy of web visitors via what it calls an identity firewall. The purpose 
of an identity firewall is to establish a boundary. Inside the boundary of the identity firewall, 
the identity of a web visitor is accessible to authorized personnel or processes. Other personal 
information is also available, such as e-mail address, home address and age. Outside the 
boundary of the identity firewall, no data is provided that could be used to identify a web visitor. 
Instead, any person or process requesting information outside an identity firewall, only gets an 
opaque visitor identifier. The ProReach System that issues the opaque visitor identifier can use it 
to uniquely identify the web visitor. Hence, an opaque visitor identifier is an externalizable 
reference to ProReach visitors. A person or process with an opaque visitor identifier can present 
the opaque visitor identifier to that ProReach System. The ProReach System can then map that 
opaque visitor identifier back to the actual visitor. Using this method, it is possible for a web 
marketer, for example, to be given a large amount of information about the interests of a web 
visitor but the marketer doesn't know the visitor's identity or contact information. The web 
marketer is simply given an opaque visitor identifier (or a set of such identifiers). The marketer 
gets the data he needs, but the privacy of the visitor's data is maintained. So outside the identity 
firewall, a web visitor being tracked by ProReach is anonymous.") 

• allowing the user to access the aggregated service only if the analyzing step has a 
useful result; (col.6, line 59-col.7, line 19) 

•wherein implementation of each of the identity functions of the aggregated service is 
provided by at least one of the sub-services; ("The Aggregation System does the combining 
using two subsystems. 
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(10) Response to Argument 

Applicant argues that a prima-facie case of anticipation under 35 U.S.C. § 102 has not 
been made, "the reference must teach every aspect of the claimed invention either explicitly or 
impliedly". 

In contrary, Prior art reference Liu et al. (U.S. 6,839,680) teaches the claimed limitations: 

In Claim 1 : A computer-implemented method of provisioning an aggregated service in a 
computing network, comprising steps of: 

• obtaining credentials of a user ("Individual user profiles are then created for users 
automatically based on satisfaction of the user group membership rules", "This 
information is also used to automatically update group membership and user profile 
information"; abstract) who requests to access an aggregated service (FIG. 10 illustrates the 
features of the aggregator service; "daily Aggregation System"; Referring to FIG. 10 "there 
is shown an illustration of the components of the aggregation system 724. The aggregation 
system 724 is generally responsible for various types of services. First, a Daily Aggregation 
System 919 is responsible for generating daily aggregates from the web events that occur on the 
web server 102. Second, a Dimensional Aggregation System 941 is responsible for combining 
the daily aggregates by dimensional combining into the various User and Category complexes 
illustrated in FIG. 2. Third, a User Group System 950 is responsible for defining and maintaining 
definitions of user groups. A Profile Service 955 is responsible for maintaining individual user 
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profiles, and responding to queries regarding these aspects. All these services are within the 
scope of the aggregation system 724. 

The Daily Aggregation System comprises a Handler object 920, a Calculus object 922, a 
Parser object 924, an Aggregator object 926. The aggregation queue 722 is also best understood 
as being a entry point to the Daily Aggregation System 724 (and was illustrated separately in 
FIGS. 7a-7d for convenience). 

An Event Dispatcher 930 monitors all the activities within all the services of the 
Aggregation System, and fires events to whoever is interested in listening to them. The Event 
Dispatcher is not part of the services within the Aggregation System. It simply monitors and 
overlook and watches all the activities going on inside the Aggregation System like a camera. 

(185) The Daily Query object 932 is part of the Daily Aggregation System and is responsible for 
all queries concerning daily aggregates. The Daily Query object handles all types of queries 
regarding interests of users, as described above, including defining interests, and identifying 
users having particular interests (on daily basis). Queries are processed by a query language 
interpreter 944, which uses a query language 946. The handler 920 exports the interface of the 
Daily Aggregation System, and manages the remaining components of the daily aggregation 
service during the daily aggregation process of packets of web events."; 

• locating (112), in a network-accessible registry ("ProReach (202) provides turnkey categories, 
allowing the system to categorize web content as soon as ProReach is installed and running on a 
particular web site. In one embodiment, the turnkey categories are provided from a central host 
system that is in communication with a particular local ProReach system installation The host 
ProReach system provides a comprehensive set of categories that target the practical information 
needs of e-businesses, and it provides sample data for these categories."), a service description 
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document (602 -Global Identifier, 610-Yellow Pages, 612-Global Exchange Policy, 608- 
Global Client Management, 604-Standard Category Tree) specifying a provisioning 
interface for the aggregated service, the aggregated service comprising an aggregation of a 
plurality of sub-services and the provisioning interface specifying how to invoke identity 
functions of the aggregated service; (various levels of sub-services of Fig.2; sub-services of 
103, 100, 112, and 110 of Fig.3; Hus & spokes (service & sub-services) of fig.4) 

• analyzing the obtained credentials by invoking one or more of the identity functions, according 
to the specification thereof in the provisioning interface, to determine whether the user is 
authenticated for, and/or is authorized for, accessing the aggregated service; ("Identity 
firewall"; col.7, lines 12-18) and 

• allowing the user to access the aggregated service only if the analyzing step has a successful 
result, (it is inherent to allow a client to communicate to the network aggregation service system 
after being authenticated via the Identity firewall) 

In Claim 2: The computer-implemented method according to Claim 1, wherein an 
implementation of each of the identify functions of the aggregated service is provided by at least 
one of the subservices. (Fig. 10) 



In Claim 10: The computer- implemented method according to Claim 1, wherein the service 
description document is specified in a markup language, (html) 
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In Claim 12: The computer-implemented method according to Claim 2, wherein the network 
accessible registry is accessed using standardized messages, (standardized messages of the 
aggregation system 724) 

In Claim 13: A system for provisioning an aggregated service in a computing network, 
comprising: means for defining a provisioning interface of the aggregated service; 

• means for specifying the provisioning interface in a service description document; (abstract) 

• means for obtaining credentials of a user who requests to access an aggregated service; 
("Individual user profiles are then created for users automatically based on satisfaction of 
the user group membership rules", "This information is also used to automatically update 
group membership and user profile information 9 '; abstract) 

• means for locating, in a network-accessible registry ("ProReach (202), a service description 
document specifying a provisioning interface for the aggregated service, the aggregated service 
comprising an aggregation of a plurality of sub-services and the provisioning interface specifying 
how to invoke identity functions of the aggregated service; (various levels of sub-services of 
Fig.2; sub-services of 103, 100, 112, and 110 of Fig.3; Hus & spokes (service & sub-services) 
offig.4) 

• means for analyzing the obtained credentials by invoking one or more of the identity functions, 
according to the specification thereof in the provisioning interface, to determine whether the user 
is authenticated for, and/or is authorized for, accessing the aggregated service; and (Identity 
firewall.) 
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• means for allowing the user to access the aggregated service only if the means for analyzing 
has a successful result, (it is inherent to allow a client to communicate to the network 
aggregation service system after being authenticated via the Identity firewall.) 

In Claim 14: A computer program product for provisioning an aggregated service in a computing 

• computer-readable program code means for obtaining credentials of a user who requests to 
access an aggregated service; (abstract; "individual profile", "user profile") 

• computer-readable program code means for locating, in a network-accessible registry, a service 
description document specifying a provisioning interface for the aggregated service, the 
aggregated service comprising an aggregation of a plurality of sub-services and the provisioning 
interface specifying how to invoke identity functions of the aggregated service; ("Individual 
user profiles are then created for users automatically based on satisfaction of the user 
group membership rules", "This information is also used to automatically update group 
membership and user profile information"; abstract) 

• computer-readable program code means for analyzing the obtained credentials by invoking one 
or more of the identity functions, according to the specification thereof in the provisioning 
interface, to determine whether the user is authenticated for, and/or is authorized for, accessing 
the aggregated service; and (Identity firewall.) 

• computer-readable program code means for allowing the user to access the aggregated service 
only if the computer-readable program code means for analyzing has a successful result, (it is 
inherent to allow a client to communicate to the network aggregation service system after being 
authenticated via the Identity firewall.) 



* 
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With respect to applicant argument Liu does not teach that the web sites, server, and domains are 
in anyway aggregated to form an aggregated service. In contrary, Liu teaches an aggregated 
service by allowing web visitors to visit a website or multiple websites (col.2, lines 27-44). 



For the above reasons, it is believed that the rejection should be sustained. 

Respectfully submitted, 




^RiMARY EXAMINE^ 
JCP 

5/27/06 



Conferees 



Application/Control Number: 10/047,811 Page 10 

Art Unit: 2143 

For the above reasons, it is believed that the rejection should be sustained. 

Respectfully submitted, 



PRIMARY EXAMINE 

JCP 

5/27/06 



Conferees 




